All 2 CVE vulnerabilities found in firefly-iii, with AI-generated Chinese analysis, references, and POCs.
Vendor: firefly-iii
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-71250 | Firefly III - Webhook URL Validation Explicitly Allows Loopback and Is Bypassable via DNS Rebinding CWE-918 | 4.3 | Medium | 2026-08-05 |
| CVE-2024-37893 | MFA bypass in oauth flow in Firefly III CWE-287 | 5.9 | Medium | 2024-06-17 |
All 2 known CVE vulnerabilities affecting firefly-iii with full Chinese analysis, references, and POCs where available.